feat: 虚拟支付完整链路——vpay服务模块(双签名/充值下单/回调到账/退款) + 充值页 + 我的入口 + session_key存储
This commit is contained in:
@@ -87,6 +87,7 @@ router.post('/login', async (req, res) => {
|
||||
if (code) {
|
||||
const sessionData = await weChatService.code2Session(code)
|
||||
openid = sessionData.openid
|
||||
req.body._sessionKey = sessionData.sessionKey || ''
|
||||
}
|
||||
|
||||
// 方式2: 开发环境直接使用 openid (已废弃，仅用于本地调试)
|
||||
@@ -118,6 +119,7 @@ router.post('/login', async (req, res) => {
|
||||
if (userInfo?.nickName) user.nickName = userInfo.nickName
|
||||
if (userInfo?.avatarUrl) user.avatarUrl = userInfo.avatarUrl
|
||||
}
|
||||
if (req.body._sessionKey) user.sessionKey = req.body._sessionKey
|
||||
|
||||
await user.save()
|
||||
|
||||
|
||||
@@ -0,0 +1,119 @@
|
||||
const express = require('express')
|
||||
const crypto = require('crypto')
|
||||
const router = express.Router()
|
||||
const { User, Order, AIChatQuota } = require('../models')
|
||||
const ApiResponse = require('../utils/response')
|
||||
const { userAuthMiddleware } = require('../middleware/auth')
|
||||
const logger = require('../utils/logger')
|
||||
|
||||
// ===== 环境与密钥 =====
|
||||
const ENV = parseInt(process.env.VPAY_ENV || '1') // 0=现网 1=沙箱
|
||||
const OFFER_ID = process.env.VPAY_OFFER_ID || ''
|
||||
const APPKEY = ENV === 0 ? (process.env.VPAY_APPKEY_PROD || '') : (process.env.VPAY_APPKEY_SANDBOX || '')
|
||||
|
||||
/** 代币名称（前端展示用） */
|
||||
const COIN_NAME = '星尘'
|
||||
|
||||
/** 充值档位（前端传 productId → 此表映射；1:100 兑换比例下分即星尘数） */
|
||||
const RECHARGE_PACKAGES = [
|
||||
{ id: 'pack_600', coins: 600, priceFen: 600, label: '600 星尘' },
|
||||
{ id: 'pack_1800', coins: 1800, priceFen: 1800, label: '1800 星尘' },
|
||||
{ id: 'pack_5000', coins: 5000, priceFen: 5000, label: '5000 星尘' },
|
||||
{ id: 'pack_12000', coins: 12000, priceFen: 12000, label: '12000 星尘' },
|
||||
]
|
||||
|
||||
// ===== 签名工具 =====
|
||||
function hmacSha256Hex(key, data) {
|
||||
return crypto.createHmac('sha256', key).update(data, 'utf8').digest('hex')
|
||||
}
|
||||
|
||||
/**
|
||||
* 生成虚拟支付拉起参数（客户端 wx.requestVirtualPayment 直接用）
|
||||
* 服务端计算两个签名：
|
||||
* paySig = hmac_sha256(appKey, "requestVirtualPayment&" + signData)
|
||||
* signature = hmac_sha256(sessionKey, signData)
|
||||
*/
|
||||
function buildPayParams(user, pack, outTradeNo) {
|
||||
const signData = JSON.stringify({
|
||||
mode: 'coin',
|
||||
offerId: OFFER_ID,
|
||||
buyQuantity: pack.coins,
|
||||
outTradeNo,
|
||||
custom: '',
|
||||
attach: JSON.stringify({ uid: String(user._id), pack: pack.id }),
|
||||
ts: Math.floor(Date.now() / 1000),
|
||||
})
|
||||
return {
|
||||
mode: 'coin',
|
||||
env: ENV,
|
||||
offerId: OFFER_ID,
|
||||
buyQuantity: pack.coins,
|
||||
outTradeNo,
|
||||
currencyType: 'CNY',
|
||||
platform: 'android',
|
||||
signData,
|
||||
paySig: hmacSha256Hex(APPKEY, `requestVirtualPayment&${signData}`),
|
||||
signature: hmacSha256Hex(user.sessionKey || '', signData),
|
||||
}
|
||||
}
|
||||
|
||||
// ===== 接口 =====
|
||||
|
||||
/**
|
||||
* 查询充值档位 + 当前星尘余额
|
||||
* GET /api/vpay/info
|
||||
*/
|
||||
router.get('/info', userAuthMiddleware, async (req, res) => {
|
||||
try {
|
||||
const user = req.user
|
||||
return ApiResponse.success(res, {
|
||||
coinName: COIN_NAME,
|
||||
env: ENV === 0 ? 'production' : 'sandbox',
|
||||
packages: RECHARGE_PACKAGES.map(p => ({ id: p.id, coins: p.coins, priceYuan: (p.priceFen / 100).toFixed(2), label: p.label })),
|
||||
balance: user.vpayCoins || 0,
|
||||
})
|
||||
} catch (error) {
|
||||
logger.error('vpay info 失败:', error)
|
||||
return ApiResponse.serverError(res, '获取充值信息失败')
|
||||
}
|
||||
})
|
||||
|
||||
/**
|
||||
* 创建充值订单（返回客户端拉起支付的完整参数）
|
||||
* POST /api/vpay/recharge { packageId }
|
||||
*/
|
||||
router.post('/recharge', userAuthMiddleware, async (req, res) => {
|
||||
try {
|
||||
const user = req.user
|
||||
const { packageId } = req.body
|
||||
const pack = RECHARGE_PACKAGES.find(p => p.id === packageId)
|
||||
if (!pack) return ApiResponse.error(res, '无效的充值档位', 400)
|
||||
if (!user.sessionKey) {
|
||||
return ApiResponse.error(res, '登录态已过期，请重新登录后再充值', 401, { needRelogin: true })
|
||||
}
|
||||
|
||||
const outTradeNo = `VP${Date.now()}${crypto.randomBytes(3).toString('hex').toUpperCase()}`
|
||||
|
||||
// 记订单
|
||||
const order = new Order({
|
||||
orderNo: outTradeNo,
|
||||
openid: user.openid,
|
||||
userId: user._id,
|
||||
productId: pack.id,
|
||||
productName: pack.label,
|
||||
amount: pack.priceFen / 100,
|
||||
status: 'pending',
|
||||
metadata: { type: 'vpay_recharge', coins: pack.coins, env: ENV },
|
||||
})
|
||||
await order.save()
|
||||
|
||||
const payParams = buildPayParams(user, pack, outTradeNo)
|
||||
logger.info(`[vpay] 充值订单 ${outTradeNo} 创建 (${pack.label}, env=${ENV})`)
|
||||
return ApiResponse.success(res, { orderNo: outTradeNo, payParams })
|
||||
} catch (error) {
|
||||
logger.error('vpay recharge 失败:', error)
|
||||
return ApiResponse.serverError(res, '创建充值订单失败')
|
||||
}
|
||||
})
|
||||
|
||||
module.exports = router
|
||||
@@ -47,10 +47,39 @@ module.exports = function registerWxMsgRoutes(app) {
|
||||
}
|
||||
const event = fields.Event || fields.event || ''
|
||||
console.log('[wx-msg] 收到推送 Event=' + event, JSON.stringify(fields).slice(0, 500))
|
||||
// TODO(vpay接入)：按事件分发改写用户星尘余额/发货状态
|
||||
// xpay_coin_pay_notify 代币充值到账
|
||||
// xpay_goods_deliver_notify 道具发货
|
||||
// xpay_refund_notify 退款
|
||||
|
||||
// 代币充值到账：改写用户星尘余额 + 订单状态
|
||||
if (event === 'xpay_coin_pay_notify') {
|
||||
try {
|
||||
const { User, Order } = require('../models')
|
||||
const outTradeNo = fields.OutTradeNo || ''
|
||||
const coins = parseInt(fields.BuyQuantity || fields.buyQuantity || '0')
|
||||
if (outTradeNo && coins > 0) {
|
||||
const order = await Order.findOne({ orderNo: outTradeNo })
|
||||
if (order && order.status === 'pending') {
|
||||
await Order.updateOne({ _id: order._id }, { status: 'paid', paidAt: new Date() })
|
||||
await User.updateOne({ _id: order.userId }, { $inc: { vpayCoins: coins } })
|
||||
console.log(`[wx-msg] 星尘充值到账: ${outTradeNo} +${coins}`)
|
||||
}
|
||||
}
|
||||
} catch (e) { console.error('[wx-msg] 充值到账失败:', e.message) }
|
||||
}
|
||||
|
||||
// 退款：扣回星尘
|
||||
if (event === 'xpay_refund_notify') {
|
||||
try {
|
||||
const { User, Order } = require('../models')
|
||||
const outTradeNo = fields.OutTradeNo || ''
|
||||
const order = await Order.findOne({ orderNo: outTradeNo, status: 'paid' })
|
||||
if (order) {
|
||||
await Order.updateOne({ _id: order._id }, { status: 'refunded' })
|
||||
const coins = (order.metadata || {}).coins || 0
|
||||
if (coins > 0) await User.updateOne({ _id: order.userId }, { $inc: { vpayCoins: -coins } })
|
||||
console.log(`[wx-msg] 星尘退款: ${outTradeNo} -${coins}`)
|
||||
}
|
||||
} catch (e) { console.error('[wx-msg] 退款处理失败:', e.message) }
|
||||
}
|
||||
|
||||
return res.status(200).json({ ErrCode: 0, ErrMsg: '' })
|
||||
} catch (e) {
|
||||
console.error('[wx-msg] 处理失败:', e.message)
|
||||
|
||||
Reference in New Issue
Block a user